Hydrogen Vitality is a trading name of Optimal Engineering Ltd, a company registered in Ireland under Company Number 726499 and VAT Number IE4100597KH with a registered office at Clongall, Edenderry, Co. Meath (referred to in this policy as "we", "us", or "our").
We are the Data Controller of your personal data as defined under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Irish Data Protection Act 2018.
For all privacy-related enquiries or to exercise your data protection rights, please contact us at: Email:info@hydrogenvitality.ie
Last updated: 16 May 2026
1. Introduction
We are committed to protecting your personal data and processing it fairly, lawfully, and transparently. This Privacy Policy explains:
- What personal data we collect about you and how;
- Why we collect it and the legal basis for doing so;
- How long we keep it and who we share it with;
- Your rights under GDPR and how to exercise them.
This policy applies to all personal data collected through our website (the "Website"), when you purchase our products, use our IC Card and hydrogen water dispensing Machines, or contact us for support.
2. What Personal Data We Collect
Depending on how you interact with us, we may collect the following categories of personal data:
2.1 Data You Provide Directly
- Identity data: full name
- Contact data: email address, and any other contact details you provide when registering or contacting us
- Account data: username, password (stored in encrypted form), account preferences
- Transaction data: details of products purchased, order history, IC Card number, and card balance information
- Payment data: billing details submitted at checkout. Note that full payment card details are processed directly by our payment processor(s) and are not stored by us
- Communications data: any information you provide when contacting our customer support team
2.2 Data Collected Automatically
When you visit our Website, we may automatically collect certain technical data, including:
- IP address and approximate location
- Browser type and version
- Device type and operating system
- Pages visited, time spent on pages, and navigation behaviour
- Referral source (how you arrived at our Website)
This data is collected through cookies and similar tracking technologies. Please see Section 7 (Cookies) for more information.
3. Legal Basis for Processing
Under GDPR, we are required to have a lawful basis for processing your personal data. We rely on the following legal bases:
| Purpose of Processing | Legal Basis |
|---|---|
| Processing your order and managing your account | Contract — Art. 6(1)(b): necessary to perform our contract with you |
| Managing your IC Card and credit balance | Contract — Art. 6(1)(b): necessary to perform our contract with you |
| Providing customer support | Contract — Art. 6(1)(b): necessary to perform our contract with you |
| Sending transactional emails (order confirmation, Card dispatch, account notifications) | Contract — Art. 6(1)(b): necessary to perform our contract with you |
| Sending marketing emails and promotional communications | Consent — Art. 6(1)(a): we will only send marketing communications where you have given us your explicit consent, which you may withdraw at any time |
| Fraud prevention and security monitoring | Legitimate Interests — Art. 6(1)(f): it is in our legitimate interest to protect our business and customers from fraud and unauthorised access |
| Website analytics and performance monitoring | Legitimate Interests — Art. 6(1)(f): it is in our legitimate interest to understand how our Website is used in order to improve it |
| Compliance with legal and regulatory obligations (e.g. tax records, accounting) | Legal Obligation — Art. 6(1)(c): we are required to retain certain records under Irish law |
4. How We Use Your Personal Data
We use your personal data for the following purposes:
- To create and manage your account on our Website;
- To process your purchase of a products or Top-Up Credit;
- To manage and maintain your IC Card and credit balance;
- To communicate with you regarding your orders, account, and support requests;
- To send you marketing and promotional emails, where you have consented to receive them;
- To detect, prevent, and investigate fraud, misuse, or security incidents;
- To monitor and improve the performance and functionality of our Website;
- To comply with our legal, regulatory, and accounting obligations.
We will not use your personal data for any purpose incompatible with the purposes listed above without first informing you and, where required, obtaining your consent.
5. Who We Share Your Data With
We do not sell, rent, or trade your personal data. We may share your data with the following categories of trusted third-party service providers, strictly to the extent necessary to operate our business and deliver our services:
| Category | Purpose | Provider(s) |
|---|---|---|
| Payment processors | To securely process your payments | Stripe & PayPal |
| E-commerce platform | To host and operate the Website and manage orders | BigCommerce |
| Email platform | To send transactional and marketing emails | Mailchimp & Gmail |
| Website hosting / cloud infrastructure | To host and serve the Website | BigCommerce |
| Analytics providers | To analyse Website traffic and usage | Google Analytics |
All third-party providers are contractually required to process your personal data securely, only for the purposes we specify, and in compliance with applicable data protection laws. Where providers act as data processors on our behalf, we have appropriate data processing agreements in place with them.
6. International Data Transfers
Some of our third-party service providers may be located outside the European Economic Area ("EEA"). Where personal data is transferred to countries not recognised by the European Commission as providing an adequate level of data protection, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, before any transfer takes place.
7. Cookies
Our Website uses cookies and similar technologies to ensure its proper functioning, analyse usage, and improve your experience.
7.1 What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help the website remember information about your visit.
7.2 Types of Cookies We Use
| Type | Purpose |
|---|---|
| Strictly necessary cookies | Essential for the Website to function (e.g. maintaining your session, shopping cart) |
| Analytics cookies | Help us understand how visitors use the Website (e.g. pages visited, time on site) |
| Marketing/tracking cookies | Used to deliver relevant advertising and track campaign performance |
7.3 Your Cookie Choices
Strictly necessary cookies are always active and cannot be switched off as they are essential to the operation of the Website. For all other cookies, we will ask for your consent via our cookie consent banner when you first visit the Website. You may withdraw or update your cookie preferences at any time through the cookie settings link in our Website footer.
You may also control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Website.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention periods are as follows:
| Data Category | Retention Period |
|---|---|
| Account and transaction data | Duration of your account, plus 7 years from the date of last transaction (in accordance with Irish Revenue requirements) |
| IC Card and balance records | Duration of your account, plus 2 years following closure |
| Customer support communications | 3 years from the date of the last interaction |
| Marketing consent records | Until you withdraw your consent, plus a reasonable period thereafter for record-keeping purposes |
| Technical and analytics data | Up to 26 months, depending on the tool used |
When data is no longer required, it is securely deleted or anonymised.
9. Your Rights Under GDPR
Under GDPR, you have the following rights in relation to your personal data:
- Right of Access (Art. 15): You may request a copy of the personal data we hold about you.
- Right to Rectification (Art. 16): You may ask us to correct inaccurate or incomplete personal data.
- Right to Erasure (Art. 17): You may request that we delete your personal data in certain circumstances (e.g. where it is no longer needed for the purpose it was collected).
- Right to Restriction of Processing (Art. 18): You may ask us to restrict how we process your data in certain circumstances.
- Right to Data Portability (Art. 20): Where processing is based on your consent or a contract, you may request your data in a structured, commonly used, machine-readable format.
- Right to Object (Art. 21): You may object to processing based on legitimate interests, or to the use of your data for direct marketing at any time.
- Right to Withdraw Consent (Art. 7(3)): Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
- Right not to be subject to Automated Decision-Making (Art. 22): We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
To exercise any of these rights, please contact us at info@hydrogenvitality.ie with your full name, email address, and a description of your request. We will respond within one month of receipt, as required by GDPR. We may ask you to verify your identity before processing your request.
10. Marketing Communications
Where you have consented to receive marketing communications from us, we may send you emails about our products, promotions, and updates. You may unsubscribe at any time by:
- Clicking the unsubscribe link included in every marketing email; or
- Contacting us directly at info@hydrogenvitality.ie.
Unsubscribing from marketing emails will not affect transactional emails related to your account or purchases.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include encrypted data transmission (HTTPS), access controls, and regular security reviews.
However, no method of transmission over the internet or electronic storage is entirely secure. While we take every reasonable precaution, we cannot guarantee the absolute security of data transmitted to or from our Website.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Data Protection Commission without undue delay and, where required, notify affected individuals directly.
12. Children's Privacy
Our Website and services are not specifically directed at children. We do not knowingly collect personal data from individuals who are not capable of providing valid consent under applicable law. If you believe we have inadvertently collected personal data from a child without appropriate consent, please contact us at info@hydrogenvitality.ie and we will take prompt steps to delete that data.
13. Third-Party Links
Our Website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.
14. Right to Lodge a Complaint
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Irish Data Protection Commission ("DPC"), which is the supervisory authority for data protection matters in Ireland:
Data Protection Commission 21 Fitzwilliam Square South Dublin 2, D02 RD28 Ireland Website: www.dataprotection.ie
We would, however, appreciate the opportunity to address your concerns directly before you contact the DPC. Please reach out to us at info@hydrogenvitality.ie in the first instance.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. Any updates will be posted on this page with a revised "Last updated" date. Where changes are material, we will notify registered account holders by email. Your continued use of the Website following any changes constitutes acknowledgement of the updated policy.